The safe and legally compliant handling of your data is particularly important to us. We therefore provide you with comprehensive information about the processing of your personal data within the meaning of Art. 4 No. 1 of the EU General Data Protection Regulation ("GDPR") as part of the application process and beyond.
In addition to our general Data Privacy Statement on the website, we inform you below in detail about specific information on the processing of personal data in the application process.
1. Name and contact details of the controller
Your contact person as the controller within the meaning of the GDPR, the German Federal Data Protection Act (hereinafter referred to as "BDSG"), other data protection laws of the member states and further data protection regulations is
ASC Technologies AG
Seibelstraße 2-4
63768 Hösbach
Phone: +49 6021 5001 0
E-mail: hq@asctechnologies.com
(hereinafter referred to as "ASC", "we", "us" or "our")
2. Name and contact details of the legal representative
The legal representative within the meaning of Art. 4 No. 17 GDPR is
Marco Müller
Seibelstraße 2-4
63768 Hösbach
Phone: +49 6021 5001 114
E-mail: m.mueller@asc.de
3. Contact details of the data protection officer
If you have any questions regarding the processing of your personal data or your rights as a data subject, please contact our internal data protection officer
Kilian Haßkerl
Seibelstraße 2-4
63768 Hösbach
Phone: +49 6021 5001 0
E-mail: data.protection@asc.de
4. Your rights as a data subject
According to the GDPR, you are granted the following rights:
- Access in accordance with Art. 15 GDPR: You can request information about the personal data processed by us. This includes, in particular, information on (i) the purposes of processing, (ii) the categories of personal data, (iii) the ecipients, (iv) the storage period, (v) the existence of a right to rectification, (vi) erasure, (vii) restriction of processing or objection, (viii) the existence of a right to lodge a complaint, (ix) the origin of your data if it was not collected by us, and (x) the existence of automated decision-making including profiling and, if applicable, meaningful information on the details thereof;
- Rectification in accordance with Art. 16 GDPR: You have the right to request the immediate correction of incorrect or the completion of incomplete data stored by us;
- Erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data, unless its processing is necessary for (i) compliance with a legal obligation, (ii) the protection of public interests or (iii) the stablishment, exercise or defense of legal claims;
- Restriction of processing pursuant to Art. 18 GDPR: You may request the restriction of data processing if (i) the accuracy of the personal data is disputed by you, (ii) the processing is unlawful, (iii) you oppose the erasure, (iv) we no longer require the data but you need it to assert, exercise or defend legal claims, or (v) you have objected to processing pursuant to Art. 21 GDPR;
- Data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller;
- Object pursuant to Art. 21 GDPR: You have the right to object to the processing of your personal data at any time, provided that this is based on Art. 6 para. 1 lit. e (public interest) or lit. f GDPR (legitimate interest);
- Automated decisions in individual cases including profiling in accordance with Art. 22 GDPR: You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or significantly affects you in a similar manner;
- Lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR: You can lodge a complaint with the data protection supervisory authority responsible for us if you believe that the processing of your personal data does not comply with the articles of the GDPR.
If you wish to exercise your right to lodge a complaint, you can contact the data protection supervisory authority responsible for us
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Phone: +49 981 180093 0
Fax: +49 981 180093 800
E-mail: poststelle@lda.bayern.de
5. Right of withdrawal
You can revoke the consent you have given to us at any time in accordance with Art. 7 para. 3 GDPR. The revocation is only effective for the future and does not affect the lawfulness of the processing carried out up to that point. After revocation, the data concerned will be erased in accordance with Art. 17 para. 1 lit. b GDPR.
6. Purpose and legal basis of data processing
Personal data within the meaning of Art. 4 No. 1 GDPR is any information relating to an identified or identifiable natural person, e.g. name, date of birth, address or your e-mail address.
In accordance with the GDPR and the BDSG, ASC only collects and processes such personal data during the entire application process that is necessary for the decision on the establishment of an employment, internship or training relationship (hereinafter referred to as "employment relationship").
The legal bases for data processing are in particular (i) your consent (Art. 6 para. 1 lit. a GDPR), (ii) the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR), and (iii) Art. 88 GDPR in conjunction with Section 26 BDSG for processing in the employment context.
We only process special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. biometric/genetic data or trade union membership) from your application with your express consent in accordance with Art. 9 para. 2 lit. a GDPR in conjunction with Art. 6 para. 1 lit. a GDPR.
7. Transmission of personal data
7.1 Data transmission within ASC
If you apply via our online application portal, you submit your personal data via the BITE E-Recruiting system by completing the online form and uploading application documents.
The data is automatically transferred to the electronic application management system and stored there. Each department concerned is only granted access if it is actively involved in the selection process. Unauthorized access is not possible.
Applications submitted in writing or by e-mail are also transferred to the system. The original documents are then destroyed in accordance with data protection regulations.
Technical and organizational measures in accordance with Art. 32 GDPR ensure an appropriate level of protection.
As an alternative to manual entry, you can also import your data via a CV upload or a link to a profile on XING or LinkedIn.
7.2 Data transfer outside of ASC
The application management system is provided by our service provider BITE GmbH as a so-called "stand-alone solution". Your data is automatically transmitted to BITE when you submit your application via the online form.
BITE GmbH
Wegenerstraße 7
89231 Neu-Ulm
(hereinafter referred to as "BITE")
The legal basis for the transfer is your consent (Art. 6 para. 1 lit. a GDPR) and the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
7.3 No data transfer to a third country
ASC does not transfer your personal data to third countries outside the EU/European Economic Area (EEA) or to international organizations.
Data processing by BITE also takes place exclusively within the EU/EEA. Disclosure requires the prior consent of ASC and only takes place in compliance with the requirements of Arts. 44 et seq. GDPR.
7.4 Recipients within ASC
Your data will only be made accessible to those employees and departments within ASC who are involved in the application process (e.g. HR, line managers).
In addition, interest groups such as the works council may - within the scope of legal obligations - also be given access to your documents (legal basis: Art. 6 para. 1 lit. c GDPR in conjunction with Section 99 para. 1 BetrVG).
7.5 Data processing by processors
There is an data processing agreement with BITE in accordance with Art. 28 para. 3 GDPR. BITE processes your data exclusively in accordance with our instructions and in compliance with technical and organizational security measures pursuant to Art. 32 para. 1 GDPR.
8. Categories of personal data
During the application process, ASC only processes your personal data that is necessary for the decision on the establishment of an employment relationship.
The following categories of personal data may be processed:
- Master data (e.g. full name, date of birth, nationality and marital status)
- Contact details (e.g. private address, e-mail address, mobile and telephone number)
- Application documents (e.g. CV, cover letter, application photo, certificates, diplomas and job references, desired salary and motivation)
- Data on proof of qualifications (e.g. training and further education, professional experience and additional qualifications)
- Data provided voluntarily by the applicant (e.g. data resulting from communication or a job interview)
If you disclose special categories of personal data within the meaning of Art. 9 para. 1 GDPR in your documents (e.g. health data), we will only process these to the extent permitted by law and on the basis of your express consent.
9. Website of ASC
If you apply via our website, you will be automatically redirected to our applicant portal. There you can fill out an online application form and upload your application documents.
The applicant portal serves as a technical interface to the applicant management system BITE E-Recruiting. After submitting the form, the data you have entered and uploaded is automatically transmitted to the BITE system and stored there.
The use of the applicant portal requires your prior consent to data processing (Art. 6 para. 1 lit. a GDPR). Alternatively, you can also apply to us by email or post. In this case, your documents will be transferred to the system manually.
Further information on the processing of personal data when using our website (outside the applicant portal) can be found in our general data privacy policy.
10. BITE: Online applicant portal
ASC collects the following personal data on the applicant portal, which is required to process your application and contact you:
- Full name (first name and surname)
- Private address data (street and house number)
- Zip code and place of residence
- Date of birth
- Nationality
- Private telephone number
- Private e-mail address
- Desired salary
This data is processed for the proper execution of the application process. Your contact details are also used to make initial contact. The use of the online application form requires your consent to the terms of use in the form of an opt-in. The legal basis for the processing of the personal data resulting from the application in this respect is (i) the consent given by you in accordance with Art. 6 para. 1 lit. a GDPR, (ii) Art. 88 para. 1 GDPR and (iii) §26 para. 1 BDSG.
You can automatically transfer your details by uploading a CV or linking your profile on XING or LinkedIn. The connection to the respective network is only established when you make an active selection.
Please note that ASC has no influence on data processing by the social networks. After data transfer, you should log out of the respective network if necessary. For further information, please refer to the privacy policies of XING and LinkedIn.
11. BITE E-Recruiting: Online applicant management system
ASC uses the BITE E-Recruiting applicant management system for the structured processing and administration of incoming applications. Based on the information you provide in the online form, a digital applicant profile is created that contains your personal data and the relevant e-mail correspondence. The legal basis for this processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR.
11.1 Automated analysis of job references
Upon receipt of your application documents, ASC carries out a fully automated analysis of the available job references in BITE E-Recruiting. This serves the purpose of checking the suitability of the applicant and improving the comparability of applicants on the basis of objective evaluation criteria. The legal basis for this processing is the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR and the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, which is reflected in a more efficient processing of your request, an objective assessment of the applicant's suitability for the tasks expected of him/her in the event of an employment relationship and increased comparability due to the analysis and evaluation of objective factors.
11.2 Comparison with sanctions lists
To protect against legal and financial risks, ASC compares your personal data with (EU) sanctions lists. This serves to fulfill legal verification obligations and to check the accuracy of your data. The legal basis is the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
11.3 Further information
Further information can be found in BITE's privacy policy, which will tell you more about data protection in BITE.
12. BITE: Connection to other job boards
ASC uses the BITE applicant management system, which is connected to various online job boards. If you apply to us via an external job board, the personal data you enter will be transmitted to the BITE application management system so that an applicant profile is automatically created for you.
Below, you will find a selection of the currently connected platforms:
Job exchange | Description | Provider |
|---|---|---|
Indeed | Indeed is an online job platform that publishes job advertisements and offers employers and job seekers the opportunity to get in touch with each other. Further details regarding the scope of the processing of personal data can be found in Indeed's privacy policy, which can be found in its data protection center. | Indeed Ireland Operations Limited Dublin – Block B, Capital Dock |
Google For Jobs | Google for Jobs is a function of Google that bundles job advertisements from various sources and enables users to conduct a targeted job search directly via Google Search. Information on the processing of personal data and the protection of your privacy can be found in Google's privacy policy. | Google Ireland Limited |
Jooble | Jooble is a global job search engine that aggregates job offers from various sources and offers users a central platform for job searches. You can find more information about measures relating to the protection of your personal data in Jooble's data protection information. | Ladoburn Europe LTD |
Jobfeed | Jobfeed is an online job market analysis tool that collects and structures job advertisements from various sources and provides companies and institutions with data-based insights into the job market. You can find more information about your privacy and the collection, storage and processing of your data in Jobfeed's privacy policy. | Textkernel - Deutschland |
LinkedIn is an online network that offers, among other things, functions for job searches, professional networking and the publication and application of job offers. If you would like more information about the storage of your personal data, please refer to LinkedIn's privacy policy. | LinkedIn Ireland Unlimited Company | |
Jobrapido | Jobrapido is an international search engine that brings together job advertisements from various sources and provides users with a central platform for job searches. If you would like more detailed information about the type of personal data collected and processed, you can find this in Jobrapido's privacy policy. | Jobrapido Srl |
Jobbydoo | Jobbydoo is a digital job platform that has been specially developed for applicants and enables them to search for suitable jobs in their region, industry or qualification by bundling job advertisements from numerous sources. Information that explains the processing of your data and the protection of your privacy in detail can be found in Jobbydoo's privacy policy. | Fabulabs S.p.A |
12.1 Employment Agency („Agentur für Arbeit“): Overview of job exchanges
In order to draw the attention of qualified applicants to our vacancies, ASC publishes job advertisements on external online job exchanges in cooperation with the Federal Employment Agency („Agentur für Arbeit“). This serves to increase our range and target potential applicants.
If you apply via one of these platforms, the personal data you provide is automatically transmitted to BITE, where an applicant profile is created with your data. BITE acts as a technical interface for data transmission. The data is processed exclusively for the purpose of carrying out the application process and for making a decision on the establishment of an employment relationship. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR and Art. 88 GDPR in conjunction with Section 26 BDSG.
Below you will find an overview of the currently connected job exchanges:
Job exchange | Job board description | Provider |
|---|---|---|
Azubi.de | azubi.de is an online platform on which apprenticeships, dual study programs and internships in Germany can be offered and searched for. If you would like further information about data processing, the storage period of the data and data security, you can find this in the data protection regulations. | FUNKE Works GmbH |
Online-Stellenmarkt.net | Online-Stellenmarkt.de is a job exchange on the Internet where job advertisements from various sectors can be published and applications can be generated in this way. Further details on data protection can be found in the platform's privacy policy. | HIS - Hetzner Internet Service |
Rekruter.de | Rekruter.de is an online job exchange and career platform where companies can publish job offers and applicants can search for jobs that match their profile. You can find more information about the protection of your personal data in Rekruter.de's privacy policy. | FM-Studios |
jobs-für-meine-region.de | Jobs-für-meine-Region.de is a Germany-wide online job portal that bundles current vacancies and helps applicants to find suitable jobs in their area. Further details regarding the scope of the processing of personal data can be found in the data protection information. | Jobware GmbH |
XING is a professional online network that offers applicants a large number of job advertisements and supports them in their job search and in making direct contact with employers. Information about data security can be found here. You can also find out more details about data protection by visiting XING's privacy policy. | New Work SE | |
HeyJobs | HeyJobs is a job platform that uses AI-supported algorithms and an optimized application process to help applicants find suitable job offers. You can find detailed information about the storage, processing and protection of personal data in the HeyJobs privacy policy. | HeyJobs GmbH |
Deutschland-Stellenmarkt.de | Deutschland-Stellenmarkt.de is a specialized job portal that offers applicants a large number of job offers from various sectors and supports them in their targeted job search. If you would like to find out more details about the platform's data protection, you can obtain information here. | HR4YOU AG |
Stellenanzeigen-Markt.de | Stellenanzeigen-Markt.de is an online job portal that provides applicants with a wide selection of current job advertisements and helps them to find suitable job offers from various sectors. Detailed information about data collection and the further processing of personal data can be found here. | Osirius GmbH |
arbeitsmarktservice.at | The Public Employment Service Austria (AMS) is the central state institution for job placement and labor market policy in the country. It offers applicants comprehensive support in their job search. If you would like more information about how your personal data is handled, you can view this in the data protection provisions of arbeitsmarktservice.at. | Public Employment Service |
jobcluster.de | Jobcluster.de is a job platform that helps applicants to find the right job through an extensive database of job advertisements from various sectors. Information on the protection of your personal data and your privacy can be found in the jobcluster.de privacy policy. | Jobcluster Deutschland GmbH |
salesjob | Salesjob.de is a specialized online job exchange that focuses exclusively on sales positions and offers applicants a wide selection of job offers in field sales, office sales and at management level. Detailed information about which data is collected, stored and processed can be found in salesjob's privacy policy. | salesjob Stellenmarkt GmbH |
mein pflegejob | Mein-pflegejob.de is a specialized job portal for the care sector that helps applicants find suitable jobs in areas such as geriatric, nursing and intensive care. Detailed information on the processing and protection of your personal data can be found in the data protection information. | mein-pflegejob | Wohnen im Alter Internet GmbH |
13. No automated decision-making
As part of the application process, ASC does not make any decisions based solely on automated processing within the meaning of Art. 22 GDPR. In particular, no automated decision is made that has a legal effect on you or significantly affects you in a similar way.
14. Retention and deletion period
ASC retains your personal data, which is collected and processed during the entire application process, until the decision on the establishment of an employment relationship is made.
- Recruitment: If ASC decides to start an employment relationship, your personal data will be transferred to the personnel file after the application process has been completed and deleted, taking into account the statutory retention periods.
- Rejection: If ASC decides not to establish an employment relationship, the application documents will be stored in BITE's digital application management system for a maximum of six months after rejection. Your data will be deleted then. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The purpose and legitimate interest are therefore the assertion, exercise or defense of potential legal claims against the applicant.
- Postal e-mail applications: If you have sent your application to ASC by post or electronically (e.g. as an e-mail), your application documents will also be transferred to BITE. After a decision has been made on the establishment of an employment relationship or a rejection has been issued, your original documents will be destroyed in accordance with data protection regulations and the e-mail containing the application will be deleted.
- Applicant pool: If the applicant wishes to be included in ASC's applicant pool, the personal data will be stored until revoked by the applicant, but for no longer than twelve months. The legal basis for the processing is the applicant's consent pursuant to Art. 6 para. 1 lit. a GDPR. The applicant can optionally give this consent by opting in within the ASC online application form. The purpose of storage in the event of consent is to store the application documents for consideration for other positions whose requirements match the applicant's profile.
Status 04.06.2025